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(54) MULTI-OPERATING SYSTEM CONTROL METHODPROGRAM FOR 
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CONTROL DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a multi-operating system control method 
capable of improving the security and reliability of a multi-operating systemand 
provide a program for making a computer perform the method and a multi- 
operating system control device. 

SOLUTION: In the case of transmitting data from OS201 to OS202a register data 
read/write processing part 24 of OS201 writes transmit data in OS-to-OS data 



communication register 18. After switching from OS201 to OS202 is performed 
by an OS switching processing part 281a register data read/write processing part 
242 of the OS202 reads out data from the OS-to-OS data communication register 
18. 



CLAIMS 



[Claim(s)] 
[Claim 1] 

It is the multi operating system control method which carries out switching control 
of the 1st operating system and 2nd operating system that work by one computer 
Like data storage Takumi who stores data which becomes a predetermined 
register with a communication object during execution of said 1st operating 
system 

A data acquisition process of acquiring data which serves as said communication 
object from said predetermined register when a change is made by said 2nd 
operating system from said 1st operating system 

it is ****** - a multi operating system control method characterized by things. 
[Claim 2] 

When data which becomes said predetermined register with a communication 
object like said data storage Takumi is stored. Virtual memory was beforehand 
carried out to logical address N of the 1st virtual memory space corresponding to 
said 1st operating system. With the 1st change command changed from said 1st 
operating system to said 2nd operating system. From said 1st operating 
systemchange to said 2nd operating system and by said data acquisition process. 
A data acquisition command memorized beforehand in the logical address N+1 
of the 2nd virtual memory space corresponding to said 2nd operating systemOr a 
multi operating system control method according to claim 1 executing a data 
acquisition command executed after a command memorized beforehand in this 
logical address N+1 and acquiring data which serves as said communication 



object from said predetermined register. 
[Claim 3] 

After said 2nd operating system executes said data acquisition commandWith 
the 2nd change command for changing from said 2nd operating system by which 
virtual memory was carried out beforehand to said 1st operating system. A multi 
operating system control method according to claim 2 changing from said 2nd 
operating system to said 1st operating system. 
[Claim 4] 

A data backup process of backing up data stored in a predetermined registerSaid 
backed-up dataincluding further a data restoration process restored to said 
predetermined register in which this data was stored like said data storage 
TakumiStore data used as a communication object in a register in which data 
was backed up by said data backup processand with said 2nd change command. 
When a change is performed to said 1st operating system from said 2nd 
operating systemby said data restoration process. A multi operating system 
control method according to claim 3 restoring said backed-up data to said 
predetermined register in which this data was stored. 
[Claim 5] 

A multi operating system control method of a statement of even either of claims 
1-4wherein said predetermined register is a register which is not used by the 1st 
operating system during execution of said 1st operating system. 
[Claim 6] 

A multi operating system control method according to claim 5wherein said 
predetermined register is a debugging register and/or a general register which 
are not used by the 1st operating system during execution of said 1st operating 
system. 
[Claim 7] 

Like said data storage Takumisize of data used as said communication object 
includes further a data size determination process which judges whether it is size 
storable in said predetermined registerWhen it can storestore data in a register 



predetermined [ this ]and when it cannot storeA multi operating system control 
method of a statement of even either of claims 1-6wherein it stores data which 
serves as said communication object by storing means other than said 
predetermined register and said 2nd operating system acquires stored data. 
[Claim 8] 

Said storing means is a storing means with which a Network Interface Card was 
equippedWhen data used as said communication object addressed to said 2nd 
operating system is stored in this storing meansA multi operating system control 
method according to claim 7 relaying said 1st operating system and setting 
connection of this storing means as said 2nd operating system. 
[Claim 9] 

A program which makes a computer perform a multi operating system control 
method that even either of claims 1-8 was indicated. 
[Claim 10] 

It is a multi operating system control device which carries out switching control of 
the 1st operating system and 2nd operating system that work by one computer 
A data storing means which stores data which becomes a predetermined register 
with a communication object during execution of said 1st operating system 
A data acquisition means which acquires data which serves as said 
communication object from said predetermined register when a change is made 
by said 2nd operating system from said 1st operating system 
A multi operating system control device characterized by preparation ******. 
[Claim 11] 

When data which becomes said predetermined register with a communication 
object by said data storing means is stored. Virtual memory was beforehand 
carried out to logical address N of the 1st virtual memory space corresponding to 
said 1st operating system. With the 1st change command changed from said 1st 
operating system to said 2nd operating system. From said 1st operating 
systemchange to said 2nd operating system and said data acquisition meansA 
data acquisition command memorized beforehand in the logical address N+1 of 



the 2nd virtual memory space corresponding to said 2nd operating systemOrthe 
multi operating system control device according to claim 10 executing a data 
acquisition command executed after a command memorized beforehand in this 
logical address N+1and acquiring data which serves as said communication 
object from said predetermined register. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] 

This invention relates to the multi operating system control method for carrying 
out switching control of two or more operating systems which work on one 
computerthe program which makes a computer perform the methodand a multi 
operating system control device. 

In particularit is related with securitythe multi operating system control method 
which can raise reliabilitythe program which makes a computer perform the 
methodand an operating system control device. 

[0002] 

[Description of the Prior Art] 

In the usual computerone operating system operatesit manages computer 
resourcessuch as a processor of a computera memoryand a secondary 
memoryand the resource schedule is carried out so that the computer can 
operate efficiently. There are various kinds of operating systems. It is 
varioussuch as what is excellent in batch processingwhat is excellent in TSS 
(Time Sharing System)a thing excellent in GUI (Graphical User Interface). 
[0003] 

On the other handthere are needs to perform simultaneously these two or more 



**** operating system by one computer. For examplein a mainframethere is a 
demand that the operating system which performs on-line processing 
accompanying actual businessand the operating system for development want to 
operate by one computer. Or there is also a demand that the operating system 
with which GUI is readyand an operating system excellent in real-time 
requirement want to work simultaneously etc. 
[0004] 

Howevereach operating system is designed considering managing a computer 
resource independently as a premise. Thereforecoexistence of two or more 
operating systems is impossible without a certain mechanism. 
[0005] 

As a mechanism in which two or more operating systems are operated on one 
computerthere is a virtual-machine method realized with the mainframe. Drawing 
21 is a block diagram showing the example 1 of composition of the conventional 
multi operating system by the above-mentioned virtual-machine method. 
[0006] 

The multi operating system shown in the figure comprises hardware 1 and base 
OS2the VM (Virtual Machine) monitor 3virtual OS(operating system) 4 ivirtual 
OS4 2 and virtual OS4 3 . 
[0007] 

The hardwares 1 are CPU (Central Processing Unit)a physical 
memoryinput/output devicesetc. Base OS2 and the VM monitor 3 are controlling 
all the hardwares 1. The VM monitor 3 emulates the interface to each hardware 1 
of virtual OS4 1 - 4 3 . Virtual OS4 1 - 4 3 run on base OS2. That isbase OS2and 
virtual OS4 1 - 4 3 are in a master-slave relation. 
[0008] 

In the multi operating system shown in the figurewhen communicating data 
between virtual OS'sthe method of going via the shared memory (graphic display 
abbreviation) which can be referred to simultaneously from base OS2and virtual 
OS4 1 - 4 3 is taken. 



[0009] 

For examplein transmitting data to virtual OS4 2 from virtual OS4 iafter virtual 
OS4 1 stores data in a shared memoryvirtual OS4 2 acquires data from a shared 
memory. Communication is performed via shared memory and base OS2 
between virtual OS and other devices in addition to between virtual OS's. 
[0010] 

There is a microkernel method as art of providing the interface of two or more 
operating systems by one computer. Drawing 22 is a block diagram showing the 
example 2 of composition of the conventional multi operating system by the 
above-mentioned microkernel method. 
[0011] 

The multi operating system shown in the figure comprises the hardware 5the 

microkernel (control program) 60S7 iOS7 2and OS7 3. 

[0012] 

In the microkernel methodOS7 1 which provides the operating system function 
shown to a user on the microkernel 6 - 7 3 are built. A user uses the hardware 5 
(computer resource) via OS7 1-73. The microkernel 6 controls OS7 1-73. 
[0013] 

In the multi operating system shown in the figurealso when communicating data 
between OS'sa microkernel and the method of going via the shared memory 
(graphic display abbreviation) which can be referred to simultaneously from OS7 
1 - 7 3 are taken. 
[0014] 

For examplein transmitting data to OS7 2 from OS7 iafter OS7 1 stores data in a 
shared memoryOS7 2 acquires data from a shared memory. Communication is 
performed via a shared memory or the microkernel 6 between OS and other 
devices in addition to between OS's. 
[0015] 
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[0016] 

[Problem(s) to be Solved by the Invention] 

By the waysince it was communicating via the shared memory between virtual 
OS's and between virtual OS and other devices in the conventional multi 
operating system shown in drawing 21 as mentioned abovethere was a problem 
that security was low. 
[0017] 

That issince it can be referred to simultaneouslywhen it is accessed unlawfully to 
the above-mentioned shared memory by the shared memory from the outside at 
the time of communication from each of two or more virtual OS4 1 - 4 3virtual OS4 
1 - 4 3 are attacked simultaneously. 
[0018] 

Also in the conventional multi operating system shown in drawing 22 a shared 
memory simultaneously from each of two or more OS7 1 - 7 3 Since it can be 
referred toWhen it is accessed unlawfully by the shared memory from the outside 
at the time of communicationOS7 1 - 7 3 are attacked simultaneouslyand there is 



a security top problem. 
[0019] 

This invention is made in view of the aboveand is a thing. 
The purpose is to provide the security of **the multi operating system control 
method which can raise reliabilitythe program which makes a computer perform 
the methodand a multi operating system control device. 

[0020] 

[Means for Solving the Problem] 

To achieve the above objectsif it is in a multi operating system control method 
concerning this inventionlt is the multi operating system control method which 
carries out switching control of the 1st operating system and 2nd operating 
system that work by one computerLike data storage Takumi who stores data 
which becomes a predetermined register with a communication object during 
execution of said 1st operating systemWhen a change was made by said 2nd 
operating system from said 1st operating systema data acquisition process of 
acquiring data which serves as said communication object from said 
predetermined register was included. 
[0021] 

According to this inventiondata which becomes a predetermined register with a 
communication object is stored during execution of the 1st operating 
systemSince we decided to acquire data which serves as a communication 
object from a predetermined register when a change was made by the 2nd 
operating system from the 1st operating systemBy using for communication 
between operating systems a register in which size of storable data was 
restrictedwithout passing a shared memory. The possibility of abnormal operation 
of each operating system by communication of inaccurate data can be 
avoidedand security of a multi operating system and reliability can be raised. 
[0022] 

If it is in a multi operating system control method concerning the next 



inventionWhen data which becomes said predetermined register with a 
communication object like said data storage Takumi is stored. Virtual memory 
was beforehand carried out to logical address N of the 1st virtual memory space 
corresponding to said 1st operating system. With the 1st change command 
changed from said 1st operating system to said 2nd operating system. From said 
1st operating systemchange to said 2nd operating system and by said data 
acquisition process. A data acquisition command memorized beforehand in the 
logical address N+1 of the 2nd virtual memory space corresponding to said 2nd 
operating systemOr a data acquisition command executed after a command 
memorized beforehand in this logical address N+1 is executedand data which 
serves as said communication object from said predetermined register is 
acquired. 
[0023] 

When data used as a communication object is stored in a predetermined register 
according to this invention. Virtual memory was beforehand carried out to logical 
address N of the 1st virtual memory space corresponding to the 1st operating 
system. With the 1st change command changed from the 1st operating system to 
the 2nd operating system. It changes from the 1st operating system to the 2nd 
operating systemA data acquisition command memorized beforehand in the 
logical address N+1 of the 2nd virtual memory space corresponding to the 2nd 
operating systemOr since a data acquisition command executed after a 
command memorized beforehand in this logical address N+1 is executed and 
data which serves as a communication object from a predetermined register is 
acquiredlntersectionssuch as the conventional base OS and VM monitorcan be 
unnecessarythe 1st and 2nd operating systems can live togetherand security of a 
multi operating system and reliability can be raised. 
[0024] 

If it is in a multi operating system control method concerning the next 
inventionAfter said 2nd operating system executes said data acquisition 
commandWith the 2nd change command for changing from said 2nd operating 



system by which virtual memory was carried out beforehand to said 1st operating 
systemit changes from said 2nd operating system to said 1st operating system. 
[0025] 

According to this inventionthe 2nd operating systemWith the 2nd change 
command for changing from the 2nd operating system by which virtual memory 
was carried out beforehand to the 1st operating systemafter executing a data 
acquisition command. A change and cut return of an operating system can be 
performed smoothlymaintaining high security and reliabilitysince it changes from 
the 2nd operating system to the 1st operating system. 
[0026] 

If it is in a multi operating system control method concerning the next inventionA 
data backup process of backing up data stored in a predetermined registerSaid 
backed-up dataincluding further a data restoration process restored to said 
predetermined register in which this data was stored like said data storage 
TakumiStore data used as a communication object in a register in which data 
was backed up by said data backup processand with said 2nd change command. 
When a change is performed to said 1st operating system from said 2nd 
operating systemsaid data backed up by said data restoration process is restored 
to said predetermined register in which this data was stored. 
[0027] 

According to this inventionstore data used as a communication object in a 
register which backs up data stored in a predetermined register and by which 
data was backed upand with the 2nd change command. Since we decided to 
restore backed-up data to a predetermined register in which data was stored 
when a change was performed to the 1st operating system from the 2nd 
operating systemBy being able to store data which communicates between 
operating systems in a register currently used during execution of the 1st 
operating systemand communicating using the registerSecurity of a multi 
operating system and reliability can be raised. 
[0028] 



If it is in a multi operating system control method concerning the next 
inventionsaid predetermined register is characterized by being a register which is 
not used by the 1st operating system during execution of said 1st operating 
system. 
[0029] 

Since it presupposed that it is a predetermined register a register which is not 
used by the 1st operating system during execution of the 1st operating system 
according to this inventionData which communicates between operating systems 
can be stored and security of a multi operating system and reliability can be 
raised by communicating using the register. 
[0030] 

If it is in a multi operating system control method concerning the next 
inventionSaid predetermined register is characterized by being a debugging 
register and/or a general register which are not used by the 1st operating system 
during execution of said 1st operating system. 
[0031] 

Since it presupposed that it is a predetermined register a debugging register 
and/or a general register which are not used by the 1st operating system during 
execution of the 1st operating system according to this inventionData which 
communicates between operating systems can be stored in a debugging register 
and/or a general registerand security of a multi operating system and reliability 
can be raised by communicating using the register. 
[0032] 

If it is in a multi operating system control method concerning the next 
inventionLike said data storage Takumisize of data used as said communication 
object includes further a data size determination process which judges whether it 
is size storable in said predetermined registerWhen it can storedata is stored in a 
register predetermined [ this ]when it cannot storedata which serves as said 
communication object by storing means other than said predetermined register is 
storedand said 2nd operating system acquires stored data. 



[0033] 

According to this inventionsize of data used as a communication object judges 
whether it is size storable in a predetermined registerWhen it can storestore data 
in a predetermined registerand when it cannot storeSince data which serves as a 
communication object by storing means other than a predetermined register is 
stored and the 2nd operating system acquires stored dataA suitable storing 
means can be chosen according to size of dataand data between efficient 
operating systems which have high security and reliability can be communicated. 
[0034] 

If it is in a multi operating system control method concerning the next inventionA 
Network Interface Card is equipped with said storing meansWhen data used as 
said communication object addressed to said 2nd operating system is stored in 
this storing meanssaid 1st operating system is relayed and connection of this 
storing means is set as said 2nd operating system. 
[0035] 

When data used as said communication object addressed to the 2nd operating 
system is stored in a storing means with which a Network Interface Card was 
equipped according to this inventionSince the 1st operating system is relayed 
and connection of a storing means is set as the 2nd operating systemEven if size 
of data used as a communication object is size unstorable in a predetermined 
registerdata between efficient operating systems which have high security and 
reliability can be communicated. 
[0036] 

A program concerning the next invention is a program which makes a computer 
perform a multi operating system control method that even either of the above- 
mentioned inventions was indicatedComputer reading of the program becomes 
possibleand any one operation of the above-mentioned invention by this can be 
performed by computer. 
[0037] 

If it is in a multi operating system control device concerning the next inventionlt is 



a multi operating system control device which carries out switching control of the 
1st operating system and 2nd operating system that work by one computerA data 
storing means which stores data which becomes a predetermined register with a 
communication object during execution of said 1st operating systemWhen a 
change was made by said 2nd operating system from said 1st operating systemit 
had a data acquisition means which acquires data which serves as said 
communication object from said predetermined register. 
[0038] 

According to this inventiondata which becomes a predetermined register with a 
communication object is stored during execution of the 1st operating 
systemSince we decided to acquire data which serves as a communication 
object from a predetermined register when a change was made by the 2nd 
operating system from the 1st operating systemBy using for communication 
between operating systems a register in which size of storable data was 
restrictedwithout passing a shared memory. The possibility of abnormal operation 
of each operating system by communication of inaccurate data can be 
avoidedand security of a multi operating system and reliability can be raised. 
[0039] 

If it is in a multi operating system control device concerning the next 
inventionWhen data which becomes said predetermined register with a 
communication object by said data storing means is stored. Virtual memory was 
beforehand carried out to logical address N of the 1st virtual memory space 
corresponding to said 1st operating system. With the 1st change command 
changed from said 1st operating system to said 2nd operating system. From said 
1st operating systemchange to said 2nd operating system and said data 
acquisition meansA data acquisition command memorized beforehand in the 
logical address N+1 of the 2nd virtual memory space corresponding to said 2nd 
operating systemOr a data acquisition command executed after a command 
memorized beforehand in this logical address N+1 is executedand data which 
serves as said communication object from said predetermined register is 



acquired. 
[0040] 

When data used as a communication object is stored in a predetermined register 
according to this invention. Virtual memory was beforehand carried out to logical 
address N of the 1st virtual memory space corresponding to the 1st operating 
system. With the 1st change command changed from the 1st operating system to 
the 2nd operating system. It changes from the 1st operating system to the 2nd 
operating systemA data acquisition command memorized beforehand in the 
logical address N+1 of the 2nd virtual memory space corresponding to the 2nd 
operating systemOr since a data acquisition command executed after a 
command memorized beforehand in this logical address N+1 is executed and 
data which serves as a communication object from a predetermined register is 
acquiredlntersectionssuch as the conventional base OS and VM monitorcan be 
unnecessarythe 1st and 2nd operating systems can live togetherand security of a 
multi operating system and reliability can be raised. 
[0041] 

[Embodiment of the Invention] 

HereafterEmbodiments 1 and 2 of the multi operating system control method 
which starts this invention with reference to drawingsthe program which makes a 
computer perform the methodand a multi operating system control device are 
described in detail. 
[0042] 

(Embodiment 1) 

Drawing 1 is a block diagram showing the outline composition of Embodiment 1 
concerning this invention. The multi operating system shown in this figure 
comprises the hardware 10OS20 iOS20 2 and AP(application program) 30 1 - 30 

4- 

[0043] 

OS20 1 and OS20 2 have register data read-and-write treating part 24 1 and 24 
2OS spawn process part 28 iand 28 2respectively. And the hardware 10 has the 



register 18 for the data communications between OS's. 
[0044] 

The register 18 for the data communications between OS's from OS20 1 to OS20 
2. Or when communicating data from OS20 2 to OS20 1 it is a register which 
stores the data which communicates and is a register which is not used by OS20 
1 or OS20 2 under execution. The command over OS of a transmission 
destinationetc. are included in the data which communicates. 
[0045] 

For exampleexcept the time of a debug modethe debugging register of the 
Pentium (registered trademark) processor by Intel is a register which is not 
usedand can be used as the register 18 for the data communications between 
OS's. 
[0046] 

Similarlyit is used in order to count the number of times of a loopbut the general 
register ECX of the Pentium (registered trademark) processor by Intel is not used 
when loop processing is not being performedbut it can be used as the register 18 
for the data communications between OS's. 
[0047] 

The register which can be used as the register 18 for the data communications 
between OS's should just be a register which is not limited to the above- 
mentioned register and is not used by OS20 1 or OS20 2 under execution. 
[0048] 

If the data stored in the register is backed up in a memory etc. even if it is the 
register currently used by OS20 1 or OS20 2 under executionthe register can be 
used as the register 18 for the data communications between OS's. 
[0049] 

Howeverthe backed-up data is restored to a register after the end of 
communication of data in this case. By doing in this wayaccess to the register 
after the end of communication of data can be normally performed now like the 
state before performing data communications. 



[0050] 

In the multi operating systemthe change to OS20 2 from OS20 1 or OS20 1 from 
OS20 2 is performed by OS spawn process part 28 1 and 28 2respectively. As a 
generation factor of interruptionthe needed information of the data through the 
register 18 for the data communications between OS'sthe periodical change 
demand by a timer (graphic display abbreviation)etc. are mentioned. 
[0051] 

In the interrupt by the needed information of data occurring and transmitting data 
to OS20 2 from OS20 iThe data transmitted to the register 18 for the data 
communications between OS's by register data read-and-write treating part 24 1 
of OS20 1 is written in (stored). 
[0052] 

And after the change to OS20 2 from OS20 1 was performed by OS spawn 
process part 28 -iData is read from the register 18 for the data communications 
between OS's by register data read-and-write treating part 24 2 of OS20 2 
(acquired)and the data communications between OS's are completed. 
[0053] 

When transmitting data to OS20 1 from OS20 2the data transmitted to the register 
18 for the data communications between OS's by register data read-and-write 
treating part 24 2 of OS20 2 is written in. And after the change to OS20 1 from 
OS20 2 is performed by OS spawn process part 28 2data is read from the register 
18 for the data communications between OS's by register data read-and-write 
treating part 24 1 of OS20 1. 
[0054] 

Heresince the size of the register 18 for the data communications between OS's 
is limited with 16 bits - about 80 bitsneither inaccurate data nor a virus program 
can spread it easily between OS20 1 and OS20 2and it can raise the security and 
reliability of OS. 
[0055] 

Thusthe multi operating systemThe feature is at a common control program and 



the point of realizing delivery of data between OS20 1 and OS20 2 using the 
register 18 for the data communications between OS's without passing a shared 
memory etc. where high security is heldlike before. 
[0056] 

Drawing 2 is a block diagram showing the concrete composition of Embodiment 
1. The same numerals are attached to the portion corresponding to each part of 
drawing 1 in this figure. This Embodiment 1 explains the case where the 
debugging register 15 of the Pentium (registered trademark) processor by Intel is 
usedas the register 18 for the data communications between OS's. 
[0057] 

In drawing 2 the hardware 10 is a computer resource and The control section 
11 the physical memory 12the interrupt vector table register 13the page table 
register 14the debugging register 15the other registers 16the program counter 
17and the keyboard that is not illustrated It comprises a display etc. 
[0058] 

OS20 1 and OS20 2 of multi-composition exist in the hardware 10. Each of OS20 
1 and OS20 2 manages the computer resource of the hardware 10and is changed 
in an interrupt handler. That isconsidering a certain timethe hardware 10 is 
occupied by one OS (OS20 1 or OS20 2). 
[0059] 

OS20 1 Data check treating part 21 -linterruption distribution treating part 22 ilt 
comprises interrupt processing section 23 iregister data read-and-write treating 
part 24 -interrupt vector table 25 -ipage table 26 iregister save area 27 ietc. 
[0060] 

OS change treating part 28 1 shown in drawing 1 1t corresponds to data check 
treating part 21 linterruption distribution treating part 22 interrupt processing 
section 23 -interrupt vector table 25 -ipage table 26 iregister save area 27 ietc. 
AP30 1 and AP30 2 are application programs which run on OS20 1. 
[0061] 

On the other handOS20 2 is put side by side to OS20 iData check treating part 



21 2interruption distribution treating part 22 2lt comprises interrupt processing 
section 23 2register data read-and-write treating part 24 2interrupt vector table 25 
2page table 26 2register save area 27 2etc. 
[0062] 

OS change treating part 28 2 shown in drawing 1 lt corresponds to data check 
treating part 21 2interruption distribution treating part 22 2interrupt processing 
section 23 2interrupt vector table 25 2page table 26 2register save area 27 2etc. 
AP30 3 and AP30 4 are application programs which run on OS20 2. 
[0063] 

In the hardware 10the control section 11 is CPU etc. and controls each part by 
program execution. The physical memory 12 is mass memory storage which 
exists really physicallyas shown in drawing 3 is used for a virtual-storage- 
supervision methodand actually memorizes various commandsdataetc. 
[0064] 

That isin this Embodiment 1 virtual-memory-space 40 1 and virtual-memory-space 
40 2 are virtually built corresponding to the physical memory 12. Virtual-memory- 
space 40 1 is provided corresponding to the OS20 1 sideand is mapped by 
physical memory field 12ai for OS of the physical memory 12and physical 
memory field 12bi for AP. 
[0065] 

Virtual-memory-space 40ai for OS is memory space used by OS20 
-landspecificallyis mapped by physical memory field 12ai for OS. Virtual-memory- 
space 40bi for AP is memory space used by AP30 1 and AP30 2and is mapped 
by physical memory field 12bi for AP. 
[0066] 

On the other handvirtual-memory-space 40 2 is provided corresponding to the 
OS20 2 sideand is mapped by physical memory field 12a2 for OS of the physical 
memory 12and physical memory field 12b2for AP. 
[0067] 

Virtual-memory-space 40a2 for OS is memory space used by OS20 



2andspecificallyis mapped by physical memory field 12a2forOS. Virtual-memory- 
space 40b2 for AP is memory space used by AP30 3 and AP30 4and is mapped 
by physical memory field 12b2 for AP. 
[0068] 

The physical address is given to the physical storage unit in the physical memory 
12. On the other handin virtual-memory-space 40 1 and virtual-memory-space 40 
2a command and data are specified by the logical address used in a program. In 
the virtual-storage-supervision methodthe logical address is changed into the 
physical address with a paging systemsegmentationand paging/segmentation. 
[0069] 

Address translation is performed in a paging system by the block unit (4 K bytes) 
called a page. For this reasonin OS20 ipage table (translation table) 26 1 
showing whether the virtual page of virtual-memory-space 40 1 supports the 
physical page of physical memory 12 throat is provided. Similarlyalso in OS20 
2page table (translation table) 26 2 showing whether the page of virtual-memory- 
space 40 2 is equivalent to the page of physical memory 12 throat is provided. 
[0070] 

As shown in drawing 4 (b)the data write command A which writes the data which 
communicates from OS20 1 to OS20 2 in the debugging register 15 is memorized 
by Z address (logical address) of virtual-memory-space 40 1. The change 
command A for changing from OS20 1 to OS20 2 is memorized by N address of 
virtual-memory-space 40 1. 
[0071] 

On the other handin virtual-memory-space 40 2the change command B for 
changing from OS20 2 to OS20 1 is memorized by the same N address as N 
address of virtual-memory-space 40 1. Data read instruction B which reads the 
data written in the debugging register 15 to the N+1st street of virtual-memory- 
space 40 2 is memorized. 
[0072] 

Returning to drawing 2 the interrupt vector table register 13 is a register which 



stores the interruption number according to interruption. This interruption number 
supports the logical address of the interrupt handler in interrupt vector table 25 1 
or interrupt vector table 25 2 mentioned later. 
[0073] 

The page table register 14 is a register which stores the page index to page table 
26 1 or page table 26 2 mentioned later. The debugging register 15 is a register 
which is not used by OS20 2 or OS20 1 under execution and which is used as the 
register 18 for the data communications between OS's. In additionthe registers 
16 are a general registera flag registeretc. The program counter 17 ************** s 
the logical address which fetches a command from virtual memory space one 
time. 
[0074] 

In OS20 -idata check treating part 21 1 performs the check of whether to be 
inaccurate about the data which communicates from OS20 1 to OS20 2. When 
this checked result is unusualalarm goes up and a series of processings are 
interrupted. 
[0075] 

Interruption distribution treating part 22 1 is made to jump to a predetermined 
interrupt handler with reference to interrupt vector table 25 1 based on the 
interruption number of the interrupt vector table register 13 at the time of 
interruption generating. Processing of interruption distribution treating part 22 1 is 
actually performed by control-section 1 1 inside at the time of interruption 
generating. 
[0076] 

Interrupt processing section 23 1 performs an interrupt handler and OS change 
processing (from OS20 1 to OS20 2). Register data read-and-write treating part 
24 1OS1 performs processing (processing which stores data) which writes the 
data which communicates to OS2 in the debugging register 15and processing 
(processing which acquires data) which reads the commo data from OS2 from the 
debugging register 15. 



[0077] 

Interrupt vector table 25 1 stores the logical address corresponding to the 
interruption processing for every interruption number mentioned above. Page 
table 26 1 is a table showing the correspondence relation between each virtual 
page of virtual-memory-space 40 1 (refer to drawing 3 )and each physical page of 
the physical memory 12. 
[0078] 

Register save area 27 1 is a field for evacuating the contents of the register (the 
interrupt vector table register 13the page table register 14the other registers 16) 
corresponding to OS before a change at the time of OS change. When changing 
from OS20 1 to OS20 2specificallythe contents of the register corresponding to 
OS20 1 are evacuated to register save area 27 <[. 
[0079] 

On the other handin OS20 2data check treating part 21 2 performs the check of 
whether to be inaccurate about the data which communicates from OS20 2 to 
OS20 1. When this checked result is unusualalarm goes up and a series of 
processings are interrupted. 
[0080] 

Interruption distribution treating part 22 2 is made to jump to a predetermined 
interrupt handler with reference to interrupt vector table 25 2 based on the 
interruption number of the interrupt vector table register 13 at the time of 
interruption generating. Processing of interruption distribution treating part 22 2 is 
actually performed by control-section 1 1 inside at the time of interruption 
generating. 
[0081] 

Interrupt processing section 23 2 performs an interrupt handler and OS change 
processing (from OS20 2 to OS20 1). Register data read-and-write treating part 
24 2OS2 performs processing (processing which stores data) which writes the 
data which communicates to OS1 in the debugging register 15and processing 
(processing which acquires data) which reads the commo data from OS1 from the 



debugging register 15. 
[0082] 

Interrupt vector table 25 2 stores the logical address corresponding to the 
interruption processing for every interruption number mentioned above. Page 
table 26 2 is a table showing the correspondence relation between each virtual 
page of virtual-memory-space 40 2 (refer to drawing 3)and each physical page of 
the physical memory 12. 
[0083] 

Register save area 27 2 is a field for evacuating the contents of the register (the 
interrupt vector table register 13the page table register 14the other registers 16) 
corresponding to OS before a change at the time of OS change. When changing 
from OS20 2 to OS20 -ispecificallythe contents of the register corresponding to 
OS20 2 are evacuated to register save area 27 2. 
[0084] 

Belowwith reference to drawing 5 the principle of operation of this Embodiment 1 
is explained. In the example of the figureOS20 1 shall be in an operating state 
and OS20 2 shall be in a waiting state. In this stateif an interrupt occurs in the 
OS20 1 sidebased on the interruption number of the interrupt vector table register 
13interrupt vector table 25 1 will be referred toand an interrupt handler will be 
performed from L address of virtual-memory-space 40 1. 
[0085] 

Henceforthwhenever it ************** s the program counter 17 (refer to drawing 2 ) 
one timel address of virtual-memory-space 40 1 shiftsand sequential execution 
of the command of the address concerned is carried out. And the data write 
command A is executed at Z address of virtual-memory-space 40 iand the data 
which communicates to OS20 2 is written in the debugging register 15. Thenthe 
change command A is executed at N addressand it changes from OS20 1 to 
OS20 2. 
[0086] 

And if it will ************** the program counter 17 one time and a logical address 



will be the N+1st streetthe N+1st data reading commands B of virtual-memory- 
space 40 2 will be executedand data will be read from the debugging register 15. 
This data reading command B is good also as performingafter memorizing to 
addresses other than the N+1st and executing the N+1st commands. 
[0087] 

Henceforthwhenever it ************** s the program counter 17 (refer to drawing 2 ) 
one timel address of virtual-memory-space 40 2 shiftsand sequential execution 
of the command of the address concerned is carried out. And jump instruction is 
executed at S address of virtual-memory-space 40 2and it is jumped to the N-M 
address of virtual-memory-space 40 2. 
[0088] 

Henceforthwhenever it ************** s the program counter 17 (refer to drawing 2 ) 
one timel address of virtual-memory-space 40 2 shiftsand sequential execution 
of the command of the address concerned is carried out. And the data write 
command B is executed at P address of virtual-memory-space 40 2and the data 
which communicates to OS20 1 is written in the debugging register 15. Thenthe 
change command B is executed at N addressand it changes from OS20 2 to 
OS20 1 (returned). 
[0089] 

And if it will ************** the program counter 17 one time and a logical address 
will be the N+1st streetthe N+1st data reading commands A of virtual-memory- 
space 40 1 will be executedand data will be read from the debugging register 15. 
This data reading command A is good also as performingafter memorizing to 
addresses other than the N+1st and executing the N+1st commands. 
[0090] 

Thenif it will ************** the program counter 17 one time and a logical address 
will be the N+2nd streetlRET will be performed and it will return from interruption. 
It operatesas well as **** when an interrupt occurs in the OS20 2 side. 
[0091] 

Belowwith reference to drawing 8 - drawing 8 the example of this Embodiment 1 



of operation is explained. Drawing 6 is a figure explaining the example of this 
Embodiment 1 of operation. In this example of operationthe various commands 
corresponding to the processing shown in the figure are assigned to each logical 
address of virtual-memory-space 40 1 and virtual-memory-space 40 2. 
[0092] 

In the example of the figureOS20 1 shall be in an operating state and OS20 2 
shall be in a waiting state. When an interrupt occurs by the OS20 1 side in this 
stateinterruption distribution treating part 22 1 is 1. It comes out and jumps to the 
interruption processing concerned with reference to interrupt vector table 25 1 
based on the interruption number of the interrupt vector table register 13. 
[0093] 

Therebyinterrupt processing section 23 1 is 2. It comes out and an interrupt 
handler is performed from L address of virtual-memory-space 40 1. 
Henceforthwhenever it ************** s the program counter 17 (refer to drawing 2 ) 
one timel address of virtual-memory-space 40 1 shiftsand sequential execution 
of the command of the address concerned is carried out. 
[0094] 

And in Y address of virtual-memory-space 40 linterrupt inhibit instruction is 
executed before OS change processing in virtual-memory-space 40 1. If interrupt 
inhibit instruction is executedit will be in the state where other interruption is not 
received. While performing OS change processingthis interrupt inhibit instruction 
is executed in order to prevent interruption with a higher priority from entering 
multiply. 
[0095] 

And in OS change processing (a register is evacuated to a register save area)the 
contents of the interrupt vector table register 13 corresponding to OS20 ithe 
page table register Hand the other registers 16 are evacuated to register save 
area 27 1 at the Y+1st street. 
[0096] 

In OS spawn process (OS's communication data check) in the Z-1st continuing 



streetthe unjust check etc. of the data which communicates from OS20 1 to OS20 
2 are performed. When a checked result is unusualalarm goes up and a series of 
processings are interrupted. 
[0097] 

In this casea checked result considers it as a normal thingand writes in the data 
which communicates from OS20 1 to OS20 2 to the debugging register 15 in OS 
spawn process (OS's communication data check) of Z address. 
[0098] 

And in OS change processing (IDTR change command)the interrupt vector table 
register 13 is changed from the object for OS20 1 to OS20 2. In the next OS 
change processing (page table register variation order)the page table register 14 
is changed into OS20 2 from the object for OS20 1 at N address of virtual- 
memory-space 40 1. Therebyit changes from OS20 1 to OS20 2 (3). . 
[0099] 

In continuing OS change processing (the commo data between OS's is read from 
a register)data is read from the debugging register 15 at the N+1st street of 
virtual-memory-space 40 2. 
[0100] 

In subsequent OS change processing (a register is returned from a register save 
area), the contents of the register for OS20 2 evacuated to register save area 27 2 
in the N+2nd street before - the interrupt vector table register 13 and the page 
table register 14 - and - in addition to this - it returns to the register 
16respectively. And an interruption permission command is executed in the 
N+3rd street. If an interruption permission command is executedit will be in the 
state of receiving other interruption (4). . 
[0101] 

And interrupt processing section 23 2 carries out sequential execution of the 
interrupt handler. And jump instruction is executed at S address of virtual- 
memory-space 40 2and it is jumped to the N-M address of virtual-memory-space 
40 2 (5). . 



[0102] 

Theninterrupt inhibit instruction in the N-M address of virtual-memory-space 40 2 
is executedand it will be in the state where other interruption is not received. And 
in OS change processing (a register is evacuated to a register save area) of 1st 
[ +] N-Mthe contents of the interrupt vector table register 13 corresponding to 
OS20 2the page table register Hand the other registers 16 are evacuated to 
register save area 27 2. 
[0103] 

In the P-1st continuing OS change processings (OS's communication data 
check)the unjust check etc. of the data which communicates from OS20 2 to 
OS20 1 are performed. When a checked result is unusualalarm goes up and a 
series of processings are interrupted. 
[0104] 

In this casea checked result considers it as a normal thingand writes in the data 
which communicates from OS20 2 to OS20 1 to the debugging register 15 in OS 
spawn process (the commo data between OS's is written in a register) of P 
address. And in OS change processing (IDTR change command)the interrupt 
vector table register 13 is changed from the object for OS20 2 to OS20 1 (6). . 
[0105] 

In continuing OS change processing (page table register variation order)the page 
table register 14 is changed into OS20 1 from the object for OS20 2 at N address 
of virtual-memory-space 40 2. Therebyit changes from OS20 2 to OS20 1 (7). . 
[0106] 

In subsequent OS change processing (the commo data between OS's is read 
from a register)data is read from the debugging register 15 in the N+1st street of 
virtual-memory-space 40 <\. 
[0107] 

And in OS change processing (a register is returned from a register save area), 
the contents of the register for OS20 1 previously evacuated to register save area 
27 1 in the N+2nd street of virtual-memory-space 40 1 - the interrupt vector table 



register 13 and the page table register 14 ~ and ~ in addition to this - it returns 
to the register 16respectively. And an interruption permission command is 
executed in the N+3rd street. If an interruption permission command is executedit 
will be in the state of receiving other interruption. 
[0108] 

Nextinterrupt processing section 23 1 carries out sequential execution of the 
interrupt handler. And IRET (interruption return instruction) is performed at X 
address of virtual-memory-space 40 iand a manipulation routine usually returns 
to a manipulation routine from an interrupt handler (8). . 
[0109] 

Drawing 7 and drawing 8 are the flow charts explaining the above-mentioned 
example of operation. In the figureif an interrupt occursan application run of 
OS20 1 will be stopped by step SAIand interruption distribution treating part 22 1 
will be started by it. In step SA2 interruption distribution treating part 22 1 of OS20 
1 acquires the interruption number corresponding to interruption from the interrupt 
vector table register 13. 
[0110] 

In step SA3interrupt vector table 25 1 is referred to by interruption distribution 
treating part 22 iand it is jumped by the logical address with the interrupt handler 
in virtual-memory-space 40 1 (1 of drawing 6 ). .An interrupt handler is performed 
in step SA4 (2 of drawing 8). . 
[0111] 

Interrupt inhibit instruction is executed in step SA5 (Y address of drawing 6 ). In 
step SA60S change processing (a register is evacuated to a register save area) 
is performed. In step SA70S change processing (OS's communication data 
check) is performedand the check of the data which communicates to OS20 2 is 
performed (the Z-1st street of drawing 6 ). When a checked result is unusualalarm 
goes up and a series of processings are interrupted. 
[0112] 

In this casea checked result considers it as a normal thingin step SA80S change 



processing (the commo data between OS's is written in a register) is 
performedand the data which communicates to OS20 2 to the debugging register 
15 is written in (Z address of dra wing 6 ). 
[0113] 

In step SA90S change processing (IDTR change command) is performed. In 
step SA10OS change processing (page table register variation order) is 
performed (3 of drawing 6 ). It changes from OS20 1 to OS20 2. 
[0114] 

OS change processing (the commo data between OS's is read from a register) is 
performed by OS20 2 step SA1 1 (the N+1st street of drawing 6 ). In step SA120S 
change processing (a register is returned from a register save area) is performed 
(the N+2nd street of drawing 6). 
[0115] 

An interruption permission command is executed in step SA13 (the N+3rd street 
of drawing 8 ). An interrupt handler is performed in step SA14. In step SA15jump 
instruction is executed and it is jumped by the N-M address (5 of drawing 6 ). . 
[0116] 

Interrupt inhibit instruction is executed in step SA16 shown in drawing 8 (N-M 
address of drawing 6 ). In step SA170S change processing (a register is 
evacuated to a register save area) is performed. In step SA180S change 
processing (OS's communication data check) is performedand the check of the 
data which communicates to OS20 1 is performed (the P-1st street of drawing 8 ). 
When a checked result is unusualalarm goes up and a series of processings are 
interrupted. 
[0117] 

In this casea checked result considers it as a normal thingin step SA190S 
change processing (the commo data between OS's is written in a register) is 
performedand the data which communicates to OS20 2 to the debugging register 
15 is written in (P address of drawing 6 ). 
[0118] 



In step SA20OS change processing (IDTR change command) is performed. In 
step SA210S change processing (page table register variation order) is 
performed (7 of drawing 6 ). It changes from OS20 2 to OS20 1. 
[0119] 

OS change processing (the commo data between OS's is read from a register) is 
performed by OS20 1 step SA22 (the N+1st street of drawing 8 ). In step SA230S 
change processing (a register is returned from a register save area) is performed 
(the N+2nd street of drawing 6 ). 
[0120] 

An interruption permission command is executed in step SA24 (the N+3rd street 
of drawing 6 ). An interrupt handler is performed in step SA25. In step SA26IRET 
(interruption return instruction) is performed and it returns from interruption. 
[0121] 

As explained aboveaccording to this Embodiment lit is from OS20 1 to OS20 
**2** (.). Or the data which communicates from OS20 2 to OS20 1 is stored in the 
debugging register 15and it is from OS20 1 to OS20 **2** (.). Or when a change 
is performed from OS20 2 to OS20 1 it is OS20 2 (•)• Or since OS20 1 reads data 
from the debugging register 15Since the data size stored in the debugging 
register 15 is restrictedit is hard to spread inaccurate data and a virus program 
between OS20 1 and OS20 2and the security of a multi operating system and 
reliability can be raised. 
[0122] 

According to this Embodiment 1the normality of the data of a communication 
object is checked by data check treating part 21 1 and data check treating part 21 
2Since it used making communications processing continue only when normalthe 
security of a multi operating system and reliability can be raised further. 
[0123] 

Since the register which is not used by OS is only used according to this 
Embodiment 1a special device or circuit are not needed at allbut a commercial 
personal computer can also realize to preparation. 



[0124] 

(Embodiment 2) 

Nowalthough Embodiment 1 mentioned above showed the case where data was 
communicated via a register between OS20 1 and OS20 2~The data 
communications which used the register when having communicated data and 
data size was size storable in a register are performedand when it is size 
unstorable in a registerit may constitute so that the data may be communicated 
with an option. 
[0125] 

Belowwhen it is data size unstorable in a registerthe example of composition 
which communicates by changing from communication by a register to 
communication using NIC (Network Interface Card) is explained. 
[0126] 

Drawing 9 is a block diagram showing the composition of this Embodiment 2. 
The multi operating system shown in this figureNIC(Network Interface Card) 
60NIC device driver 70 ilt has the hardware 10 shown in NIC device driver 70 
2 OS20 iOS20 2 AP30 ^ - 30 4 the network 50and drawing 2 (a graphic display is 
omitted). 
[0127] 

HereOS20 1 and OS20 2 are the same as that of OS20 1 and OS20 2 which were 
shown in drawing 2and have data size judgment part 29 1 and data size 
judgment part 29 2 furtherrespectively. 
[0128] 

OS change treating part 28 ilt corresponds to data check treating part 21 1 
shown in drawing 2 interruption distribution treating part 22 1 interrupt processing 
section 23 interrupt vector table 25 ipage table 26 iregister save area 27 ietc. 
Data check treating part 21 2 which showed drawing 2 OS change treating part 
28 2lt corresponds to interruption distribution treating part 22 2interrupt 
processing section 23 2 interrupt vector table 25 2page table 26 2register save 
area 27 2etc. 



[0129] 

In the multi operating systemthe change to OS20 2 from OS20 1 or OS20 1 from 
OS20 2 is performed in an interrupt handler. As a generation factor of 
interruptionthe needed information of the data between OS'sthe periodical 
change demand by a timer (graphic display abbreviation)etc. are mentioned. 
[0130] 

In this multi operating systemlike beforea common control programThe feature is 
at the point of realizing delivery of data between OS20 1 and OS20 2 where high 
security is heldusing register 18 for data communications between OS'sor 
NIC60without passing a shared memory etc. 
[0131] 

Hereaftereach component is explained in full detail. NIC60 is a LAN (Local Area 
Network) cardand is provided with the communication-interface functionfor 
example. This NIC60 is controlled by NIC device driver 70 1 and NIC device 
driver 70 2 which are mentioned later. 
[0132] 

The NIC transmission processing part 61 is provided with the function which 
transmits a packet in NIC60. The transmission buffer 62 stores temporarily the 
packet transmitted from the NIC transmission processing part 61. The NIC 
receiving processing part 63 is provided with the function to receive a packet 
from the network 50. The receive buffer 64 stores temporarily the packet 
received by the NIC receiving processing part 63. 
[0133] 

The transmitting buffer register 65 is a register which stores the value (address) 
corresponding to either transmission buffer 72 1 mentioned later or transmission 
buffer 72 2. The receiving buffer register 66 is a register which stores the value 
(address) corresponding to either receive buffer 74 1 mentioned later or receive 
buffer 74 2. 
[0134] 

NIC device driver 70 1 realizes the function of a part of OS20 iand is provided 



with the function which controls NIC60 at the time of communicationthe function 
which rewrites the value of the transmitting buffer register 65 or the receiving 
buffer register 66etc. 
[0135] 

Transmission processing part 71 ^ is provided with the function which transmits 
the data from OS20 1 in NIC device driver 70 1. Transmission buffer 72 1 stores 
the data from OS20 1 temporarily. Receiving processing part 73 1 is provided with 
the function to receive the data addressed to OS20 <\. Receive buffer 74 \ stores 
the data addressed to OS20 1 temporarily. 
[0136] 

On the other handNIC device driver 70 2 realizes the function of a part of OS20 
2and is provided with the function which controls NIC60 at the time of 
communicationthe function which rewrites the value of the transmitting buffer 
register 65 or the receiving buffer register 66etc. 
[0137] 

Here192.168.1.3 is given to OS20 1 as an IP addressfor example. On the other 
hand 192. 168. 1.4 is given to OS20 2 as another IP addressfor example. 
[0138] 

Belowthe principle of operation in the case of communicating data using NIC60 is 
explained with reference to the block diagram shown in drawing 10 . Herethe 
case where it communicates from OS20 1 to OS20 2 is explained via NIC60. 
[0139] 

It shall be in the state where OS20 1 is performingand the value corresponding to 
transmission buffer 72 1 is stored in the transmitting buffer register 66and the 
value corresponding to receive buffer 74 1 is stored in the receiving buffer 
register 65in the figure. 
[0140] 

In this statetransmission processing part 71 1 of NIC device driver 70 1 stores the 
data from OS20 1 in transmission buffer 72 1 (1). This data is transmitted to OS20 
2 from OS20 1. Thereforethe transmission destination IP address of the data 



concerned is 1 92. 1 68. 1 .4 given to OS20 2 . 
[0141] 

In (2)transmission processing part 71 1 rewrites the value of the receiving buffer 
register 65 of NIC60 from receive buffer 74 1 to receive buffer 74 2. In (3)the NIC 
transmission processing part 61 copies data to the transmission buffer 62 from 
transmission buffer 72 iafter accessing transmission buffer 72 1 with reference to 
the transmitting buffer register 66. 
[0142] 

In (4)the NIC transmission processing part 61 reads data from the transmission 
buffer 62and transmits this to the network 50. And the data concerned is stored 
in the receive buffer 64 after being received by the NIC receiving processing part 
63. 

[0143] 

In (5)the NIC receiving processing part 63 copies data to receive buffer 74 2 from 
the receive buffer 64after accessing receive buffer 74 2 with reference to the 
receiving buffer register 65. 
[0144] 

In (6)OS spawn process part 28 1 changes OS from OS20 1 to OS20 2. In 
(7)receiving processing part 73 2 reads data from receive buffer 74 2and passes it 
to OS20 2 after changing this data. 
[0145] 

Thuswithout passing a common control programa shared memoryetc. between 
OS's like beforeoperation of communication through NIC60 can realize 
communication between OS'swhere high security is held. 
[0146] 

Belowthe example of the data communications between OS's of this Embodiment 
2 of operation is explained. Drawing 1 1 and drawing 12 are flow charts which 
show the example of the data communications between OS's of this Embodiment 
2 of operation. In this example of operationcommunication by register 18 for data 
communications between OS's or NIC60 is changed with the size of dataand is 



performed. Belowthe case where the debugging register 15 is used as the 
register 18 for the data communications between OS's is explained like 
Embodiment 1. 
[0147] 

In drawing 11 if an interrupt occursan application run of OS20 1 will be stopped by 
step SBIand interruption distribution treating part 22 1 will be started by it. In step 
SB2interruption distribution treating part 22 ^ of OS20 ^ acquires the interruption 
number corresponding to interruption from the interrupt vector table register 13. 
[0148] 

In step SB3interrupt vector table 25 1 is referred to by interruption distribution 
treating part 22 iand it is jumped by the logical address with the interrupt handler 
in virtual-memory-space 40 1. An interrupt handler is performed in step SB4. 
[0149] 

Interrupt inhibit instruction is executed in step SB5. In step SB60S change 
processing (a register is evacuated to a register save area) is performed. In step 
SB70S change processing (OS's communication data check) is performedand 
the check of the data which communicates to OS20 2 is performed. When a 
checked result is unusualalarm goes up and a series of processings are 
interrupted. 
[0150] 

In this casea checked result considers it as a normal thingOS change processing 
(data size check of the commo data between OS's) is performed in step SB8and 
it is investigated whether the data which communicates to OS2 to the debugging 
register 15 can be written in. 
[0151] 

When the decision result of step SB9 can write in by "Yes"by step SB10OS 
change processing (the commo data between OS's is written in a register) is 
performedand the data which communicates to OS20 2 to the debugging register 
15 is written in. In step SB120S change processing (IDTR change command) is 
performed. 



[0152] 

When the decision result of step SB9 cannot write in by "No"OS change 
processing (commo data transmitting processing using NIC60) is performed by 
step SB1 1. In this processingprocessings from (1) to (5) shown in drawing 10 are 
performedand it shifts to step SB12 after that. 
[0153] 

In step SB130S change processing (page table register variation order) is 
performedand it changes from OS20 1 to OS20 2. In step SB14it is judged 
whether it is the communication which used the debugging register 15. 
[0154] 

For examplein communicating using NIC60a decision flag is transmitted with 
commo dataand OS20 2 receives the decision flag and it detects communication 
by NIC60. When a decision flag is not receivedthe judgment which used the 
debugging register 15 that it is communication is performed. Not only this but 
other judgment methods may be used. 
[0155] 

When the decision result of step SB14 is "Yes"OS change processing (the 
commo data between OS's is read from a register) is performed by OS20 2 step 
SB 15. In step SB 1 70S change processing (a register is returned from a register 
save area) is performed. 
[0156] 

When the decision result of step SB14 is "No"OS change processing (commo 
data reception using NIC60) is performed by step SB16. In this 
processingprocessing of (7) shown in drawing 10 is performedand it shifts to step 
SB 17 after that. 
[0157] 

An interruption permission command is executed in step SB18. An interrupt 
handler is performed in step SB19. In step SB20jump instruction is executed and 
it is jumped by the N-M address. 
[0158] 



Interrupt inhibit instruction is executed in step SB21 shown in drawing 12 . In step 
SB220S change processing (a register is evacuated to a register save area) is 
performed. In step SB230S change processing (OS's communication data 
check) is performedand the data which communicates to OS20 1 is checked. 
When a checked result is unusualalarm goes up and a series of processings are 
interrupted. 
[0159] 

In this casea checked result considers it as a normal thingOS change processing 
(data size check of the commo data between OS's) is performed in step 
SB24and it is investigated whether the data which communicates to OSi to the 
debugging register 15 can be written in. 
[0160] 

When the decision result of step SB25 can write in by "Yes"by step SB260S 
change processing (the commo data between OS's is written in a register) is 
performedand the data which communicates to OS20 1 to the debugging register 
15 is written in. In step SB280S change processing (IDTR change command) is 
performed. 
[0161] 

When the decision result of step SB25 cannot write in by "No"OS change 
processing (commo data transmitting processing using NIC60) is performed by 
step SB27. In this processingby the same method as processings from (1) to (5) 
shown in drawing IQ transmitting processing of the commo data from OS20 2 to 
OS20 1 is performedand it shifts to step SB28 after that. 
[0162] 

In step SB290S change processing (page table register variation order) is 
performedand it changes from OS20 2 to OS20 ^. In step SB30it is judged 
whether it is the communication which used the debugging register 15. 
[0163] 

For examplein communicating using NIC60a decision flag is transmitted with 
commo dataand OS20 1 receives the decision flag and it detects communication 



by NIC60. When a decision flag is not receivedthe judgment which used the 
debugging register 15 that it is communication is performed. Not only this but 
other judgment methods may be used. 
[0164] 

When the decision result of step SB30 is "Yes"OS change processing (the 
commo data between OS's is read from a register) is performed by OS20 1 step 
SB31. In step SB330S change processing (a register is returned from a register 
save area) is performed. 
[0165] 

When the decision result of step SB30 is "No"OS change processing (commo 
data reception using NIC60) is performed by step SB32. In this processingby the 
same method as processing of (7) shown in drawing i 1 i 0OS20 1 performs 
reception of commo data and shifts to step SB33 after that. 
[0166] 

An interruption permission command is executed in step SB34. An interrupt 
handler is performed in step SB35. In step SB36IRET (interruption return 
instruction) is performed and it returns from interruption. 
[0167] 

As explained abovewhen according to this Embodiment 2 communicating data 
and data size is size storable in the debugging register 15ln being the size which 
performs the data communications using the debugging register 15and cannot be 
stored in the debugging register 15Since the data is communicated using 
NIC60like before A common control programWithout passing a shared memory 
etc.using register 18 for data communications between OS'sor NIC60where high 
security is helddata can be delivered between OS20 1 and OS20 2. 
[0168] 

Since according to this Embodiment 2 the normality of the data of a 
communication object was checkedand it used making communications 
processing continue only when normalthe security of a multi operating system 
and reliability can be raised further. 



[0169] 

Data size was largeby this Embodiment 2when it was not able to store in the 
debugging register 15decided to communicate by using NIC60 herebut. It is good 
also as not being limited to it but performing data communications via a common 
control programa shared memoryetc. like before. 
[0170] 

In the abovein performing data communications via a common control programa 
shared memoryetc.Although security will falldata size is smalland when 
communicating using the debugging register 15where still high security is 
helddata can be delivered between OS20 1 and OS20 2. 
[0171] 

Drawing 13 (a) - drawing 13 (d) are the figures explaining the applications 1-4 of 
Embodiment 1 or 2 mentioned above. The application 1 shown in draw ing 13 (a) 
is an example which old and new OS is made to live togetherand is used at the 
time of system renewal. New OS supports OS20 ifor example. On the other 
handthe old OS supports OS20 1. 
[0172] 

The application 2 shown in drawing 13 (b) is an example which carries out speed 
development of the new function by the sauce public presentation OS side 
without utilizing sauce public presentation OS and waiting for the release of 
sauce secret OS. Sauce secret OS is an operating system with which the source 
code is not exhibitedfor examplesupports OS20 1. On the other handsauce public 
presentation OS is an operating system with which the source code is 
exhibitedand supports OS20 2. 
[0173] 

The application 3 shown in drawjng i 13 (c) is an example which makes exclusive 
OS and a versatile OS live together. Exclusive OS shares the function to 
specialize in real time nature etc.for examplesupports OS20 1. On the other 
handa versatile OS is Windows (registered trademark) of Microsoft 
Corp.etc.shares a GUI function and supports OS20 2. 



[0174] 

The application 4 shown in drawing 13 (d) is an example which divides 
resourcesand is an example from which directions for use differ by the purpose 
of using OS1 and OS2. OS1 supports OS20 ifor example. On the other 
handOS2 supports OS20 2 . 
[0175] 

Drawing 14 is a figure explaining the case where Embodiment 1 or 2 is applied to 
system shift. It is necessary to make all the modules of the old OS mounted in 
the old terminal shift to new OS of a new terminal at onceand anxiety remains by 
a safety aspect by the conventional shift in the figure. 
[0176] 

On the other handeach module of the old OS mounted in the old terminal is 
made to shiftif there is a multi operating systemchecking safety to the old OS of a 
way station. Nexteach module of the old OS is made to shift in a way 
stationchecking safety to new OS. 
[0177] 

Nextall the modules of new OS of a way station are made to shift to new OS of a 
new terminal at once. In this casesince it is the shift between new OS'sa problem 
does not occur. The shift by multi-OS is effective when it gives a new function to 
a certain specific module in a hurry. 
[0178] 

Drawing 15 is a figure explaining the case where Embodiment 1 or 2 is applied to 
a high security gateway. In the figurehardware is provided with the multi 
operating system (OS1 and OS2)and is connected to the Internet via NIC 
(Network Interface Card). This hardware functions as a high security gateway. 
[0179] 

OS1 accumulates a communication log in DK(disk) 1 while managing 
AP(application program) 1 which a user uses. On the other handOS2 supervises 
the communication packet from the Internet and it accumulates a surveillance log 
in DK2. 



[0180] 

In OS2it communicates by controlling NIC directly. For this reasonOS2 provides 
OS1 with false NIC-I/F which carried out false [ of the offer interface for software 
of NIC ] in order to support communication of OS1 . AP2 is an application 
program for packet monitoring log collectionand it operates on OS2. 
[0181] 

AP2 only looks at a communication packet from outsideand it is not infected by a 
virus in order not to process the execution code contained in a communication 
packet. The alteration by a holder in bad faith was not madeand the surveillance 
log accumulated in DK2 is come. Thereforeit becomes possible to leave an 
offensive trace. 
[0182] 

Herewhen an attack of security is delivered to a user's environment (OS1 grade)it 
is possible that the communication log of OS1 is altered. Howeverin Embodiment 
1 or 2since the surveillance log of OS1 and OS2 is managed independentlya 
multi operating system enables it to pursue an aggressor. Therebythe effect 
which deters the attack to the security gateway concerned is expectable. 
[0183] 

Drawing 16 is a figure explaining the case where Embodiment 1 or 2 is applied to 
a desktop Grid terminal. In the figurehardware is provided with the multi 
operating system (OS1 and OS2)and is connected to the Internet via NIC. The 
Grid server is connected to the Internet. Hardware functions as a desktop Grid 
terminal. 
[0184] 

A desktop Grid terminal is a terminal for performing desktop Grid calculation 
which is going to assign a part of big calculation and is going to realize 
calculationwhile a user does not use a computer. Hereif it sees from the user 
sidethe above-mentioned calculation the contents of whose are unknown will 
become anxious [ the adverse effect which it has on own computer environment ]. 
[0185] 



Soin the figurethe above-mentioned adverse effect can be eliminated by 
managing own computer environment by OS1 and managing the processing 
environment of Grid calculation by OS2. That isall of data and the program which 
are used by Grid calculation are managed and performed only by the control 
lower of OS2. On the other handaccess is not permitted to a computer resource 
called DK1 and MEM(memory) 1 under control of OS1. Thereforethe adverse 
effect from the program of Grid calculation is eliminated. 
[0186] 

Drawing 17 is a figure explaining the case where Embodiment 1 or 2 is applied to 
a remote management terminal. In the figurehardware is provided with the multi 
operating system (OS1 and OS2)and is connected to the network via NIC. A 
system administrator machine and other machines are connected to the network. 
Hardware functions as a remote management terminal. 
[0187] 

In the figurethe category which a user can manage is restricted to OSIand it is 
constituted so that a system administrator machine may perform management of 
OS2 via a network. Therebya system administrator can build the default 
environment of the personal computer used in office environment etc. under 
management of OS2andon the other handa user can build the environment used 
according to a user individual's liking and situation under management of OS1. 
[0188] 

Thereforethe environment prepared by the system side is prevented from 
becoming fault of operation by a user individual's configuration. OS2 provides the 
environment which was managed by the system administrator by the system 
administrator machineand was designed by the system side. When using this 
environmenthe reads the file information of OS2 into OSIand a user starts itor 
requests starting from OS2and performs with the gestalt of a client/server. 
[0189] 

Drawing 18 is a figure explaining the case where Embodiment 1 or 2 is applied to 
an efficient net service provision terminal. In the figurehardware is provided with 



the multi operating system (OS1 and OS2)and is connected to the network via 
NIC. A contents provider server and other machines are connected to the 
network. Hardware functions as an efficient net service provision terminal. 
[0190] 

In the figurean efficient net service provision terminalLike a remote management 
terminal (refer to drawing 17)one OS1 as the bottom of management of net 
service of OS2 of another side under a user's managementFor examplethe 
contents before a release are distributed under management of OS2 (DK2) a 
prioriand it is a terminal which realizes instant use of the contents from DK1 
under management of OS1 at released time. 
[0191] 

After contents are distributed to DK2 under management of OS2 from a contents 
provider server via a networkthe contents concerned are provided by a user's 
hope DK1 under management of DK2 to OS1 and use of them is attained 
instancy. Thusin a contents provider serverconcentration of download access is 
prevented by advance distribution. 
[0192] 

Drawing 19 is a figure explaining the case where Embodiment 1 or 2 is applied to 
a high security Web Service offer server. In the figurehardware is provided with 
the multi operating system (OS1 and OS2)and is connected to the network via 
NIC. The Web reading terminal is connected to the network. Hardware functions 
as a high security Web Service offer server. 
[0193] 

In the high security Web Service offer server of the figurethe environment which 
can be accessed from the outside is OS2 and the environment which can access 
only a local user is built by OS1. 
[0194] 

For exampleWeb open content and a utilization log are stored in DK2 under 
management of OS2. On the other handdata not to exhibit is stored in DK1 under 
management of OS1. In this casethe situation of releasing information not to 



release on Web accidentally by a setting error etc. is avoided. Even if it is a case 
where OS2 side receives the attack by a holder in bad faith from the exteriorin 
OS1 it becomes possible to operate except for a network function. 
[0195] 

Although Embodiments 1 and 2 which start this invention above have been 
explained in full detail with reference to drawingsthe concrete example of 
composition is not restricted to these Embodiments 1 and 2and even if the 
design variation etc. of the range which does not deviate from the gist of this 
invention occurit is included in this invention. 
[0196] 

For examplein Embodiments 1 and 2 mentioned aboveThe program for realizing 
multi operating system controlcontroletc. which were mentioned above is 
recorded on the recording medium 200 which was shown in drawing 20 and in 
which computer reading is possibleThe program recorded on this recording 
medium 200 may be made to read into the computer 100 shown in the figureand 
each function may be realized by performing. 
[0197] 

CPU110 in which the computer 100 shown in the figure executes the above- 
mentioned programThe input devices 120such as a keyboard and a mouseand 
ROM(Read OnlyMemory) 130 which memorize various datalt comprises the bus 
170 which connects each part of a device with RAM(Random Access Memory) 
140 which memorizes computation parameters etc.the reader 150 which reads a 
program in the recording medium 200and the output units 160such as a display 
and a printer. 
[0198] 

CPU1 10 realizes the function mentioned above by executing a programafter 
reading the program currently recorded on the recording medium 200 via the 
reader 150. As the recording medium 200an optical disca flexible diska hard 
disketc. are mentioned. 
[0199] 



In Embodiments 1 and 2as how to change between two operating 
systemsAlthough the logical address of virtual memory space was set up 
appropriately and how to change an operating system by changing an interrupt 
vector table register and a page table register was explainedThis invention is not 
restricted to this and may change an operating system with a conventional 
virtual-machine method or microkernel method. 
[0200] 

In Embodiments 1 and 2although the example of composition which has two 
OS20 1 shown in drawing 1 and OS20 2 as a multi operating system was 
explainedthe example of composition which has three or more OS's is also 
included in this invention. 
[0201] 

For examplein composition of having OS10S20S3...n OS's of OSn. When it 
interrupts during OS1 run and (1) occurschange to OS2 from OSIwhen it 
interrupts during OS1 run and (2) occurschange to OS3 from OSIand it is made 
to be the same as that of the followingWhat is necessary is just to control to 
change from OS1 to OSnwhen an interrupt (n-1) occurs during OS1 run. 
[0202] 

[Effect of the Invention] 

As explained aboveaccording to this inventionthe data which becomes a 
predetermined register with a communication object is stored during execution of 
the 1st operating systemSince we decided to acquire the data which serves as a 
communication object from a predetermined register when a change was made 
by the 2nd operating system from the 1st operating systemBy using for 
communication between operating systems the register in which the size of 
storable data was restrictedwithout passing a shared memory. The possibility of 
the abnormal operation of each operating system by communication of 
inaccurate data can be avoidedand the effect that the security of a multi 
operating system and reliability can be raised is done so. 
[0203] 



When the data used as a communication object is stored in a predetermined 
register according to this invention. Virtual memory was beforehand carried out to 
logical address N of the 1st virtual memory space corresponding to the 1st 
operating system. With the 1st change command changed from the 1st operating 
system to the 2nd operating system. It changes from the 1st operating system to 
the 2nd operating systemThe data acquisition command memorized beforehand 
in the logical address N+1 of the 2nd virtual memory space corresponding to the 
2nd operating systemOr since the data acquisition command executed after the 
command memorized beforehand in this logical address N+1 is executed and the 
data which serves as a communication object from a predetermined register is 
acquiredlntersectionssuch as the conventional base OS and VM monitorare 
unnecessarythe 1st and 2nd operating systems live togetherand the effect that 
the security of a multi operating system and reliability can be raised is done so. 
[0204] 

According to this inventionthe 2nd operating systemWith the 2nd change 
command for changing from the 2nd operating system by which virtual memory 
was carried out beforehand to the 1st operating systemafter executing a data 
acquisition command. The effect that a change and cut return of an operating 
system can be performed smoothly is done somaintaining high security and 
reliabilitysince it changes from the 2nd operating system to the 1st operating 
system. 
[0205] 

According to this inventionstore the data used as a communication object in the 
register which backs up the data stored in the predetermined register and by 
which data was backed upand with the 2nd change command. Since we decided 
to restore the backed-up data to the predetermined register in which data was 
stored when a change was performed to the 1st operating system from the 2nd 
operating systemBy being able to store the data which communicates between 
operating systems in the register currently used during execution of the 1st 
operating systemand communicating using the registerThe effect that the 



security of a multi operating system and reliability can be raised is done so. 
[0206] 

Since it presupposed that it is a predetermined register a register which is not 
used by the 1st operating system during execution of the 1st operating system 
according to this inventionThe data which communicates between operating 
systems can be stored and the effect that the security of a multi operating system 
and reliability can be raised is done so by communicating using the register. 
[0207] 

Since it presupposed that it is a predetermined register the debugging register 
and/or general register which are not used by the 1st operating system during 
execution of the 1st operating system according to this inventionBy being able to 
store in a debugging register and/or a general register the data which 
communicates between operating systemsand communicating using the 
registerThe effect that the security of a multi operating system and reliability can 
be raised is done so. 
[0208] 

According to this inventionthe size of the data used as a communication object 
judges whether it is size storable in a predetermined registerWhen it can 
storestore data in a predetermined registerand when it cannot storeSince the 
data which serves as a communication object by storing means other than a 
predetermined register is stored and the 2nd operating system acquires the 
stored dataA suitable storing means can be chosen according to the size of 
dataand the effect that the data between the efficient operating systems which 
have high security and reliability can be communicated is done so. 
[0209] 

When the data used as said communication object addressed to the 2nd 
operating system is stored in the storing means with which the Network Interface 
Card was equipped according to this inventionSince the 1st operating system is 
relayed and connection of a storing means is set as the 2nd operating 
systemEven if the size of the data used as a communication object is size 



unstorable in a predetermined registerthe effect that the data between the 
efficient operating systems which have high security and reliability can be 
communicated is done so. 
[0210] 

Since it was made to make a computer perform the multi operating system 
control method that even either of the above-mentioned inventions was indicated 
according to this inventionComputer reading of a program becomes possible and 
it does so the effect that any one operation of the above-mentioned invention by 
this can be performed by computer. 
[Brief Description of the Drawings] 

[Drawing 1] lt is a block diagram showing the outline composition of Embodiment 
1 concerning this invention. 

[Drawing 2] It is a block diagram showing the concrete composition of 
Embodiment 1. 

[Drawing 3] It is a figure explaining memory mapping between the multi operating 
systems in Embodiment 1. 

[Pre /ing 4] It is a figure explaining the principle of operation of Embodiment 1 
[Drawing 5] lt is a figure explaining the principle of operation of Embodiment 1 . 
[Drawing 6] It is a figure explaining the example of Embodiment 1 of operation. 
[Drawing 7] lt is a flow chart explaining the example of Embodiment 1 of operation. 
[Drawing 8] It is a flow chart explaining the example of Embodiment 1 of operation. 
[Drawing 9] It is a block diagram showing the composition of Embodiment 2 
concerning this invention. 

[Drawing 1 0] It is a block diagram explaining the example of Embodiment 2 of 
operation. 

[Drawing 1 1] lt is a flow chart explaining the example of Embodiment 2 of 
operation. 

[Drawing 12] lt is a flow chart explaining the example of Embodiment 2 of 
operation. 

[Drawing 1 3] It is a figure explaining the applications 1-4 of Embodiment 1 or 2 



concerning this invention. 

[Drawing 1 4] It is a figure explaining the case where Embodiment 1 or 2 is applied 
to system shift. 

[Drawing 1 5] It is a figure explaining the case where Embodiment 1 or 2 is applied 
to a high security gateway. 

[Drawing 1 6] It is a figure explaining the case where Embodiment 1 or 2 is applied 
to a desktop Grid terminal. 

[Drawing 17] lt is a figure explaining the case where Embodiment 1 or 2 is applied 
to a remote management terminal. 

[Drawing 1 S] It is a figure explaining the case where Embodiment 1 or 2 is applied 
to an efficient net service provision terminal. 

[Draw ing 1 Q] It is a figure explaining the case where Embodiment 1 or 2 is applied 
to a high security Web Service offer server. 

[Drawing 20] lt is a block diagram showing the composition of the modification of 
Embodiment 1 or 2. 

[Drawing 2 1 ] It is a block diagram showing the example 1 of composition of the 
conventional multi operating system. 

[Drawing 22] lt is a block diagram showing the example 2 of composition of the 
conventional multi operating system. 
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